Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/krEj-F6z1noAWLINU8kwKRPNqdc.cer
File: krEj-F6z1noAWLINU8kwKRPNqdc.cer (raw, json)
Hash identifier: 905cNYdfzHBYIJqJsRzaawcTgQT5HgOENE1huwp438Y=
Subject key identifier: 92:B1:23:F8:5E:B3:D6:7A:00:58:B2:0D:53:C9:30:29:13:CD:A9:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AFC9FD405681A67477625CF2D276784
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/216/92B123F85EB3D67A0058B20D53C9302913CDA9D7.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/216
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 01:40:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.8.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:fc:9f:d4:05:68:1a:67:47:76:25:cf:2d:27:67:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:40:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b123f85eb3d67a0058b20d53c9302913cda9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:91:32:13:89:4e:19:bd:f7:c6:c7:0f:33:
12:9c:d5:ee:ef:ea:e9:ee:b9:2f:8c:f8:d0:cd:4a:
fb:6d:ca:ac:1d:ff:01:7a:21:5c:76:94:06:e4:fd:
8c:c4:7c:5b:e4:e2:6e:f9:77:a7:2c:3c:29:42:6d:
aa:2b:50:6e:97:f2:66:e5:f5:6c:36:0d:6a:97:43:
0b:e4:71:19:b1:de:d3:39:e0:6d:25:28:cb:cb:5b:
6e:0f:7b:39:cb:3c:bf:67:d0:9a:2e:04:27:b9:45:
5e:97:30:a1:40:33:cc:8d:5f:c8:a8:df:d9:cb:2b:
b7:92:ca:92:06:35:d6:fe:4f:56:d6:83:05:c0:8e:
3f:29:f5:e0:12:fe:f1:91:f8:75:30:f2:04:84:ed:
d7:25:c2:d3:a4:ca:26:8c:9d:ef:7e:4d:b1:1a:2e:
aa:cf:22:31:4d:04:fb:e9:99:c8:95:12:99:16:b7:
2b:00:ba:7b:0b:1f:26:26:fc:7c:d8:6c:45:0a:51:
70:7f:70:c0:30:df:d7:69:6a:b3:a9:5d:0f:43:76:
bf:3f:18:6e:e9:58:e2:3c:ed:95:3f:a6:cb:2b:68:
98:eb:3b:31:93:68:88:42:8a:c1:fa:da:e8:d9:20:
ab:67:70:7d:f1:07:93:b0:c9:87:bd:f6:2f:03:df:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B1:23:F8:5E:B3:D6:7A:00:58:B2:0D:53:C9:30:29:13:CD:A9:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/216
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/216/92B123F85EB3D67A0058B20D53C9302913CDA9D7.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.8.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8f:17:e4:fc:76:25:31:08:bb:44:b2:fa:e2:ec:03:8a:da:
c4:24:f6:bf:74:bb:94:93:d0:a7:80:97:ce:e4:ef:3e:2b:9c:
b0:4d:af:bb:82:27:4a:cc:53:a3:3c:5c:d8:2c:88:e9:a6:51:
e0:aa:42:a0:a6:79:e0:6d:f1:b8:16:ee:1f:88:83:74:b5:e8:
de:2f:04:e7:74:12:6f:3a:ed:b7:6e:a7:38:d2:dc:ff:40:ac:
31:d0:fa:bd:8f:0c:0a:2d:b1:de:47:76:00:8c:fd:9b:2c:be:
9b:e2:4e:b7:07:82:26:ab:ba:70:0b:69:c6:e5:66:9f:49:47:
4e:60:67:21:93:17:61:82:42:4e:e9:bb:81:12:41:e7:68:59:
0a:14:66:de:0f:8f:85:4d:d2:2f:6a:5b:3e:bd:c3:23:e7:41:
b2:0b:35:9c:d9:bf:ba:4a:2f:b4:ba:28:d9:04:6b:4b:b7:7f:
98:c1:b9:4b:2c:3c:cf:33:d9:a8:20:fc:15:bc:96:7c:03:f4:
75:df:f9:f7:e7:51:c3:b8:f6:88:de:13:27:6b:04:57:10:70:
3b:c1:c8:31:1e:0f:ea:b8:90:a9:80:89:fa:79:5e:33:32:e1:
2e:2e:62:1b:af:c4:a5:b1:2a:a5:ef:83:b2:90:32:0f:92:7a:
d4:8f:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net